last executing test programs: 5m42.091604268s ago: executing program 3 (id=795): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) write$binfmt_misc(r0, &(0x7f0000000180), 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x2, 0x3bc}) r5 = socket(0x25, 0x1, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x2017be01}) close_range(r4, 0xffffffffffffffff, 0x0) 5m39.968291354s ago: executing program 3 (id=805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)) 5m39.667671427s ago: executing program 3 (id=809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) 5m39.43385996s ago: executing program 3 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x54, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) 5m36.865873172s ago: executing program 3 (id=812): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee656baa48c19bd1b59cb46"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x4845) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r5, r5, 0x0, 0x7ffff000) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000240), 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000900)={0x0, @remote, @remote}, &(0x7f0000000940)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x2f, 0x3e, 0x2, 0x1, 0x6b, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x20, 0x700, 0x401, 0x10}}) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f8a6e74657276616c0000000000000000000000050003bef79b3095643cb5efb4a406000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040840) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001c40)={0x84c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa9db}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xddba, 0x9, 0x0, 0x5}, {0x4007, 0xf8, 0x3, 0x5}, {0x8001, 0x0, 0x0, 0x25c1}, {0x7, 0xfe, 0x80, 0xffffffff}, {0x401, 0x4, 0x6, 0x3ff}, {0x9, 0x1, 0x4, 0x61d0}, {0x3, 0x8, 0x35, 0x8}, {0xfff7, 0x1, 0x37, 0x7ff}, {0x1, 0x5, 0x6, 0x7ab}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe88}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc690}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5c03e77f}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcd9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x123e}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x42db}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}]}, 0x84c}}, 0x8850) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000200)=0x7) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20006d00, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) 5m32.483574065s ago: executing program 3 (id=827): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 5m17.030623764s ago: executing program 32 (id=827): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 6.886622166s ago: executing program 2 (id=2496): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000000010104000000efa10000000200000004001880240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x3c}}, 0x20008820) syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0xfffffffb}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) unshare(0x22020600) r3 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x10, &(0x7f0000000380)=ANY=[], 0xfe, 0x2be, &(0x7f0000000440)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x8) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f00000003c0)={0x1, 0x4}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r4, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="44000067ef00040000007000ea844d783b94f80cc2841ca00000000208003b", @ANYRES32=r6, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x10d00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 5.958734737s ago: executing program 2 (id=2501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioprio_set$pid(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) 5.796610109s ago: executing program 1 (id=2504): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bind$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2710, @hyper}, 0x10) sendmsg$tipc(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rename(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000003500), 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000839e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) 4.340908877s ago: executing program 5 (id=2513): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x4845) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r5, r5, 0x0, 0x7ffff000) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000240), 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000900)={0x0, @remote, @remote}, &(0x7f0000000940)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x2f, 0x3e, 0x2, 0x1, 0x6b, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x20, 0x700, 0x401, 0x10}}) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f8a6e74657276616c0000000000000000000000050003bef79b3095643cb5efb4a406000300000008000400f9fffbff"], 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040840) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001c40)={0x84c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa9db}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xddba, 0x9, 0x0, 0x5}, {0x4007, 0xf8, 0x3, 0x5}, {0x8001, 0x0, 0x0, 0x25c1}, {0x7, 0xfe, 0x80, 0xffffffff}, {0x401, 0x4, 0x6, 0x3ff}, {0x9, 0x1, 0x4, 0x61d0}, {0x3, 0x8, 0x35, 0x8}, {0xfff7, 0x1, 0x37, 0x7ff}, {0x1, 0x5, 0x6, 0x7ab}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe88}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc690}}}]}}, {{0x8, 0x1, r11}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5c03e77f}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcd9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x123e}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x42db}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}]}, 0x84c}}, 0x8850) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000200)=0x7) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20006d00, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) 3.785093874s ago: executing program 0 (id=2517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 3.531733007s ago: executing program 1 (id=2518): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) 3.517312627s ago: executing program 0 (id=2520): socket$packet(0x11, 0x3, 0x300) r0 = inotify_init1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(r1, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 3.389442269s ago: executing program 2 (id=2521): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0x0) 3.328711099s ago: executing program 4 (id=2522): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b70800000000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x4) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) recvfrom$unix(r0, &(0x7f0000000140)=""/231, 0x20000, 0x14142, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ff0100001000000001000000181100005c5fb22b2da07714f87e77543ef0876fc0661ada1562e531e0a1c9e3ff311f1afcf1d11bad5a9123a8b384c1eef81b41ecd77db2149909c9b9dcede01fcd21e52446307e2f04a762787cf88a12f2398e83914e1ac832319c12508b580c42bace9f398791217ece9f990c46700000802262f62aa19b2f8184f82236d37e0ede8eba68e9f925a89485fecf827a487acda8ad47f6ab19956b57d44c6e829f1bac357754f98b84839c0d279b2b", @ANYRES32, @ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma']) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000009060102000000ffffffde00000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e0004001de69e6f994419ae8ef404ec0f30c416df944effa0791f108164ffa5a32dac2777336a8f9c54b9d791b"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 3.225015931s ago: executing program 0 (id=2523): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d63703835302c6e616d65aa7d04743d312c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c666d61736b3f30303030303430303030303030303030323030383030332c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1520, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB="000000000000000002000000000400000000d800000000000000e30000c26288377abdf95be6f601f7040af5d457b0d1131e0d1d8b9ee631fce253fe4c2dce87792073470100407636c4ecac78c7577dc3e53498f737f0d507291872f9ba2ff28566fe03fdbcb69cd1edf145b858dcb8f72193c615509f481feb8c18c2de323cd4733ba4c7793e91792b062fc873e57ba025c46fcaa97f37f5d767fc2ec565dd647a909ccc6a0b81ba58785e1e6dde5a808357b3f791b706662d82a849fecbdea33604b3276a460fc3d2e856fdd8d8d121913b3a074f88142eace0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0x0, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x2, 0x8, 0x0, 0x9, 0x0, 0x0, 0x3, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad41"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 3.103518872s ago: executing program 2 (id=2524): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r5}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r3, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x9}, {0x0, 0xfff1}, {0xfff3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x0) 2.982711324s ago: executing program 5 (id=2525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x2, 0x0, 0x2}) 1.903154207s ago: executing program 4 (id=2526): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.901225947s ago: executing program 0 (id=2527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040004) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 1.737869549s ago: executing program 2 (id=2528): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rename(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000003500), 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000839e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) 1.61967222s ago: executing program 4 (id=2529): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x43f, &(0x7f0000000e40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x1) sync() rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x480, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.58617762s ago: executing program 0 (id=2530): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") open(0x0, 0x14927e, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) 1.548265481s ago: executing program 5 (id=2531): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.407728282s ago: executing program 1 (id=2532): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r1, 0x0, 0x0) close_range(r0, r1, 0x0) 1.123457786s ago: executing program 4 (id=2533): r0 = inotify_init1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(r1, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 944.504618ms ago: executing program 1 (id=2534): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r0) 899.878509ms ago: executing program 5 (id=2535): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x400003, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) 797.37763ms ago: executing program 4 (id=2536): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe41, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000300)={[{@dioread_lock}, {@orlov}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@dioread_nolock}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4a7, &(0x7f0000000740)="$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") sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x20, r2, 0x1, 0xffffffff, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000001180)=""/207, 0xcf, 0x0, &(0x7f0000001280)=""/190, 0xbe}}, 0x10) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000f80)=@raw=[@generic={0x9, 0x0, 0x1, 0x4, 0x7}, @ringbuf_query, @generic={0x2c, 0x6, 0x9, 0x7fff, 0x3}], &(0x7f0000001080)='syzkaller\x00', 0x1, 0x11, &(0x7f00000010c0)=""/17, 0x41100, 0x4, '\x00', r7, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140)={0x4, 0xe, 0xfffffffc, 0x6}, 0x10, r10, 0x0, 0x6, &(0x7f0000001440)=[r11, 0xffffffffffffffff, 0xffffffffffffffff, r5], &(0x7f0000001480)=[{0x4, 0x1, 0xe, 0x2}, {0x0, 0x3, 0xe, 0xa}, {0x4, 0x2, 0x4}, {0x1, 0x1, 0x3, 0x2}, {0x1, 0x2, 0x10, 0xb}, {0x4, 0x2, 0x0, 0x1}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) 750.516111ms ago: executing program 1 (id=2537): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b70800000000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x4) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) recvfrom$unix(r0, &(0x7f0000000140)=""/231, 0x20000, 0x14142, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ff0100001000000001000000181100005c5fb22b2da07714f87e77543ef0876fc0661ada1562e531e0a1c9e3ff311f1afcf1d11bad5a9123a8b384c1eef81b41ecd77db2149909c9b9dcede01fcd21e52446307e2f04a762787cf88a12f2398e83914e1ac832319c12508b580c42bace9f398791217ece9f990c46700000802262f62aa19b2f8184f82236d37e0ede8eba68e9f925a89485fecf827a487acda8ad47f6ab19956b57d44c6e829f1bac357754f98b84839c0d279b2b", @ANYRES32, @ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma']) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000009060102000000ffffffde00000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e0004001de69e6f994419ae8ef404ec0f30c416df944effa0791f108164ffa5a32dac2777336a8f9c54b9d791b"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 527.315963ms ago: executing program 0 (id=2538): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES8], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) unshare(0x40000000) 213.103237ms ago: executing program 5 (id=2539): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) shutdown(r1, 0x0) 52.122329ms ago: executing program 4 (id=2540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040004) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) 15.22635ms ago: executing program 1 (id=2541): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x132) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="20000000160001ae00002000000000000a0000000400000008000b"], 0x20}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r5, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 14.76346ms ago: executing program 5 (id=2542): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 0s ago: executing program 2 (id=2543): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x43f, &(0x7f0000000e40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x1) sync() rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x480, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): e 2 family 0 port 6081 - 0 [ 447.631631][ T9658] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 447.750228][ T9637] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.388767][ T9652] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 448.401314][ T9652] EXT4-fs (loop4): This should not happen!! Data will be lost [ 448.401314][ T9652] [ 448.411088][ T9652] EXT4-fs (loop4): Total free blocks count 0 [ 448.417205][ T9652] EXT4-fs (loop4): Free/Dirty block details [ 448.423253][ T9652] EXT4-fs (loop4): free_blocks=68451041280 [ 448.429329][ T9652] EXT4-fs (loop4): dirty_blocks=32 [ 448.434515][ T9652] EXT4-fs (loop4): Block reservation details [ 448.440791][ T9652] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 448.632375][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 448.646247][ T9641] can0 (unregistered): slcan off ttyS3. [ 448.886055][ T9675] serio: Serial port ptm0 [ 448.966043][ T9677] syz.0.1753[9677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.967098][ T9677] syz.0.1753[9677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.320482][ T9696] loop5: detected capacity change from 0 to 1024 [ 449.353753][ T9699] syz.1.1762[9699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.353871][ T9699] syz.1.1762[9699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.381662][ T9699] loop1: detected capacity change from 0 to 512 [ 449.385121][ T9696] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 449.397341][ T9699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 449.470966][ T9699] EXT4-fs (loop1): 1 truncate cleaned up [ 449.478299][ T9699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 450.218956][ T9695] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 450.234579][ T9695] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 450.247571][ T9695] EXT4-fs (loop5): This should not happen!! Data will be lost [ 450.247571][ T9695] [ 450.257371][ T9695] EXT4-fs (loop5): Total free blocks count 0 [ 450.263421][ T9695] EXT4-fs (loop5): Free/Dirty block details [ 450.269464][ T9695] EXT4-fs (loop5): free_blocks=68451041280 [ 450.275374][ T9695] EXT4-fs (loop5): dirty_blocks=32 [ 450.280550][ T9695] EXT4-fs (loop5): Block reservation details [ 450.286730][ T9695] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 450.453328][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 450.632011][ T9722] can0: slcan on ttyS3. [ 450.639887][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 450.990053][ T9735] netlink: 'syz.2.1772': attribute type 10 has an invalid length. [ 451.015911][ T9735] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 451.235715][ T9741] loop4: detected capacity change from 0 to 1024 [ 451.260027][ T9741] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 451.270127][ T9741] EXT4-fs (loop4): orphan cleanup on readonly fs [ 451.279916][ T9741] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 451.295478][ T9741] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #3: comm syz.4.1775: mark_inode_dirty error [ 451.351969][ T9741] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.1775: Invalid block bitmap block 3 in block_group 0 [ 451.369771][ T9741] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 451.385503][ T9741] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #3: comm syz.4.1775: mark_inode_dirty error [ 451.406280][ T9741] Quota error (device loop4): write_blk: dquota write failed [ 451.422307][ T9741] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm syz.4.1775: lblock 6 mapped to illegal pblock 1 (length 1) [ 451.465411][ T9741] Quota error (device loop4): write_blk: dquota write failed [ 451.475260][ T9741] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 451.498070][ T9741] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.1775: lblock 0 mapped to illegal pblock 48 (length 1) [ 451.541087][ T9741] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 451.569959][ T9741] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1775: Failed to acquire dquot type 0 [ 451.603944][ T9741] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 49: comm syz.4.1775: lblock 1 mapped to illegal pblock 49 (length 1) [ 451.626114][ T9748] loop0: detected capacity change from 0 to 1024 [ 451.637347][ T9741] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1 [ 451.648949][ T9741] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 451.661010][ T9721] can0 (unregistered): slcan off ttyS3. [ 451.669071][ T9751] serio: Serial port ptm1 [ 451.674786][ T9741] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1775: Failed to acquire dquot type 0 [ 451.682197][ T9748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 451.699862][ T9741] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 451.710565][ T9741] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #15: comm syz.4.1775: mark_inode_dirty error [ 451.727103][ T9741] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 451.739715][ T9741] EXT4-fs (loop4): 1 orphan inode deleted [ 451.748526][ T9741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 451.809440][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 451.937510][ T9757] syz.4.1779[9757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.937620][ T9757] syz.4.1779[9757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.499262][ T9747] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 452.526115][ T9747] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 452.538642][ T9747] EXT4-fs (loop0): This should not happen!! Data will be lost [ 452.538642][ T9747] [ 452.548506][ T9747] EXT4-fs (loop0): Total free blocks count 0 [ 452.554586][ T9747] EXT4-fs (loop0): Free/Dirty block details [ 452.560607][ T9747] EXT4-fs (loop0): free_blocks=68451041280 [ 452.566501][ T9747] EXT4-fs (loop0): dirty_blocks=32 [ 452.571677][ T9747] EXT4-fs (loop0): Block reservation details [ 452.577813][ T9747] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 452.730380][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 452.781941][ T9757] loop4: detected capacity change from 0 to 512 [ 452.802971][ T9757] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 452.820392][ T9757] EXT4-fs (loop4): 1 truncate cleaned up [ 452.827411][ T9757] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 452.847732][ T9764] loop1: detected capacity change from 0 to 2048 [ 452.854711][ T9764] EXT4-fs: inline encryption not supported [ 452.894752][ T9764] ext4: Unknown parameter 'audit' [ 452.970408][ T9764] loop1: detected capacity change from 0 to 256 [ 453.003839][ T9764] exfat: Deprecated parameter 'namecase' [ 453.046031][ T9764] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 453.151303][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 453.208630][ T9780] can0: slcan on ttyS3. [ 453.913618][ T9786] tipc: Enabled bearer , priority 0 [ 453.972977][ T9786] tipc: Disabling bearer [ 454.211320][ T9795] loop1: detected capacity change from 0 to 1024 [ 454.277509][ T9795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 454.492676][ T9805] smc: net device bond0 applied user defined pnetid SYZ2 [ 454.514561][ T9805] smc: net device bond0 erased user defined pnetid SYZ2 [ 454.548000][ T9779] can0 (unregistered): slcan off ttyS3. [ 454.565932][ T9809] netlink: 'syz.4.1798': attribute type 10 has an invalid length. [ 454.573837][ T9809] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1798'. [ 454.771792][ T9809] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.851012][ T9809] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.966181][ T9809] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.067201][ T9794] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 455.082940][ T9794] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 455.095386][ T9794] EXT4-fs (loop1): This should not happen!! Data will be lost [ 455.095386][ T9794] [ 455.105245][ T9794] EXT4-fs (loop1): Total free blocks count 0 [ 455.111293][ T9794] EXT4-fs (loop1): Free/Dirty block details [ 455.117572][ T9794] EXT4-fs (loop1): free_blocks=68451041280 [ 455.123459][ T9794] EXT4-fs (loop1): dirty_blocks=32 [ 455.128932][ T9794] EXT4-fs (loop1): Block reservation details [ 455.135733][ T9794] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 455.177263][ T9809] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.300762][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 455.404587][ T9814] syz.5.1801[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.404700][ T9814] syz.5.1801[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.462672][ T9818] loop1: detected capacity change from 0 to 2048 [ 455.495642][ T9818] EXT4-fs: inline encryption not supported [ 455.515057][ T9818] ext4: Unknown parameter 'audit' [ 455.577543][ T9818] loop1: detected capacity change from 0 to 256 [ 455.584524][ T9818] exfat: Deprecated parameter 'namecase' [ 455.616109][ T9818] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 456.853561][ T9843] loop1: detected capacity change from 0 to 512 [ 456.861233][ T9843] EXT4-fs: Ignoring removed nobh option [ 456.913248][ T9842] smc: net device bond0 applied user defined pnetid SYZ2 [ 456.939812][ T9842] smc: net device bond0 erased user defined pnetid SYZ2 [ 457.052711][ T9843] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 457.084041][ T9853] can0: slcan on ttyS3. [ 457.088820][ T9843] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 457.108361][ T9843] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1814: Corrupt directory, running e2fsck is recommended [ 457.151778][ T9843] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 457.177578][ T9843] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.1814: corrupted in-inode xattr [ 457.211264][ T9843] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1814: couldn't read orphan inode 15 (err -117) [ 457.242749][ T9843] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 457.260466][ T9843] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 457.272288][ T9843] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 457.283063][ T9843] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1814: Corrupt directory, running e2fsck is recommended [ 457.296524][ T9843] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1814: path /350/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 457.324335][ T9857] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1817'. [ 457.325074][ T7] libceph: connect (1)[c::]:6789 error -101 [ 457.344094][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 457.352318][ T9843] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 8: comm syz.1.1814: path /350/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 457.422498][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 457.615335][ T7] libceph: connect (1)[c::]:6789 error -101 [ 457.622675][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 457.713216][ T9855] ceph: No mds server is up or the cluster is laggy [ 457.996614][ T9851] can0 (unregistered): slcan off ttyS3. [ 458.154284][ T9878] loop0: detected capacity change from 0 to 2048 [ 458.167313][ T9878] EXT4-fs: inline encryption not supported [ 458.173337][ T9878] ext4: Unknown parameter 'audit' [ 458.261524][ T9878] loop0: detected capacity change from 0 to 256 [ 458.269808][ T9885] syz.1.1826[9885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.269924][ T9885] syz.1.1826[9885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.284579][ T9878] exfat: Deprecated parameter 'namecase' [ 458.313158][ T9878] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 458.331472][ T9886] device syzkaller0 entered promiscuous mode [ 459.450355][ T9904] loop0: detected capacity change from 0 to 1024 [ 459.463912][ T9904] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 459.474133][ T9904] EXT4-fs (loop0): orphan cleanup on readonly fs [ 459.487441][ T9904] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 459.501296][ T9904] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #3: comm syz.0.1834: mark_inode_dirty error [ 459.513952][ T9904] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1834: Invalid block bitmap block 3 in block_group 0 [ 459.532412][ T9904] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 459.558379][ T9904] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #3: comm syz.0.1834: mark_inode_dirty error [ 459.585997][ T9904] Quota error (device loop0): write_blk: dquota write failed [ 459.603794][ T9904] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm syz.0.1834: lblock 6 mapped to illegal pblock 1 (length 1) [ 459.618723][ T9904] Quota error (device loop0): write_blk: dquota write failed [ 459.642946][ T9904] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 459.658172][ T9904] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.1834: lblock 0 mapped to illegal pblock 48 (length 1) [ 459.673022][ T9904] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 459.685139][ T9904] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.1834: Failed to acquire dquot type 0 [ 459.884003][ T9904] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 49: comm syz.0.1834: lblock 1 mapped to illegal pblock 49 (length 1) [ 459.965608][ T4890] libceph: connect (1)[c::]:6789 error -101 [ 459.976619][ T4890] libceph: mon0 (1)[c::]:6789 connect error [ 460.010013][ T9904] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 460.084544][ T9904] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 460.184437][ T9904] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.1834: Failed to acquire dquot type 0 [ 460.281637][ T9907] ceph: No mds server is up or the cluster is laggy [ 460.294234][ T4890] libceph: connect (1)[c::]:6789 error -101 [ 460.303578][ T4890] libceph: mon0 (1)[c::]:6789 connect error [ 460.311505][ T9904] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 460.324723][ T9904] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #15: comm syz.0.1834: mark_inode_dirty error [ 460.340586][ T9904] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 460.365149][ T9904] EXT4-fs (loop0): 1 orphan inode deleted [ 460.371371][ T9904] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 460.458347][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 461.790792][ T9919] slcan: can't register candev [ 461.806669][ T9919] Falling back ldisc for ttyS3. [ 462.913528][ T9913] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1835'. [ 463.018792][ T9926] tipc: Enabling of bearer rejected, failed to enable media [ 463.243641][ T9941] loop4: detected capacity change from 0 to 512 [ 463.261897][ T9941] EXT4-fs: Ignoring removed orlov option [ 463.275595][ T9941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.290762][ T9941] EXT4-fs (loop4): orphan cleanup on readonly fs [ 463.341874][ T9941] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1844: bg 0: block 248: padding at end of block bitmap is not set [ 463.388327][ T9941] Quota error (device loop4): write_blk: dquota write failed [ 463.421500][ T9941] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 463.459652][ T9941] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1844: Failed to acquire dquot type 1 [ 463.504289][ T9941] EXT4-fs (loop4): 1 truncate cleaned up [ 463.829617][ T5619] libceph: connect (1)[c::]:6789 error -101 [ 463.848871][ T5619] libceph: mon0 (1)[c::]:6789 connect error [ 464.185757][ T9953] ceph: No mds server is up or the cluster is laggy [ 464.242835][ T9941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 464.253595][ T9958] can0: slcan on ttyS3. [ 464.258709][ T22] libceph: connect (1)[c::]:6789 error -101 [ 464.271674][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 464.271814][ T9941] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 464.398067][ T9941] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 464.429218][ T9941] ext4 filesystem being remounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.689030][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 464.698960][ T9968] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1851'. [ 464.805988][ T26] audit: type=1326 audit(1746586956.450:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 464.888153][ T26] audit: type=1326 audit(1746586956.460:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 464.922651][ T26] audit: type=1326 audit(1746586956.460:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 464.987994][ T26] audit: type=1326 audit(1746586956.460:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 465.015265][ T9957] can0 (unregistered): slcan off ttyS3. [ 465.023752][ T9974] loop1: detected capacity change from 0 to 2048 [ 465.032378][ T9974] EXT4-fs: inline encryption not supported [ 465.040809][ T26] audit: type=1326 audit(1746586956.460:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 465.067537][ T9974] ext4: Unknown parameter 'audit' [ 465.073265][ T26] audit: type=1326 audit(1746586956.460:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 465.096590][ T26] audit: type=1326 audit(1746586956.460:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 465.149326][ T9974] loop1: detected capacity change from 0 to 256 [ 465.165526][ T9974] exfat: Deprecated parameter 'namecase' [ 465.171744][ T26] audit: type=1326 audit(1746586956.460:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 465.224596][ T26] audit: type=1326 audit(1746586956.460:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 465.302988][ T26] audit: type=1326 audit(1746586956.460:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.0.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 465.325071][ T9974] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 465.556284][ T9989] netlink: 'syz.5.1859': attribute type 10 has an invalid length. [ 465.595036][ T9989] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1859'. [ 466.552853][T10000] smc: net device bond0 applied user defined pnetid SYZ2 [ 466.580085][T10000] smc: net device bond0 erased user defined pnetid SYZ2 [ 466.846486][T10003] ALSA: seq fatal error: cannot create timer (-19) [ 466.908137][T10015] can0: slcan on ttyS3. [ 467.144377][T10018] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1870'. [ 467.248093][T10026] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.291962][T10027] netlink: 'syz.5.1876': attribute type 10 has an invalid length. [ 467.315282][T10027] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1876'. [ 467.332318][T10026] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.363276][T10029] loop1: detected capacity change from 0 to 2048 [ 467.372333][T10029] EXT4-fs: inline encryption not supported [ 467.383379][T10029] ext4: Unknown parameter 'audit' [ 467.419951][T10026] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.452766][T10029] loop1: detected capacity change from 0 to 256 [ 467.469724][T10029] exfat: Deprecated parameter 'namecase' [ 467.475021][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 467.487980][T10029] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 467.516557][T10026] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.638883][T10013] can0 (unregistered): slcan off ttyS3. [ 467.653696][T10026] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.690505][T10026] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.712710][T10026] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.824990][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 469.005740][ T22] usb 1-1: config 93 has an invalid interface number: 31 but max is 0 [ 469.031703][T10026] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.055760][ T22] usb 1-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config [ 469.075121][ T22] usb 1-1: config 93 has no interface number 0 [ 469.084382][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 469.204874][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.212942][ T22] usb 1-1: Product: syz [ 469.225130][ T22] usb 1-1: Manufacturer: syz [ 469.229795][ T22] usb 1-1: SerialNumber: syz [ 469.280651][ T22] usb 1-1: Found UVC 0.00 device syz (046d:08c3) [ 469.295044][ T22] usb 1-1: No valid video chain found. [ 469.433663][T10043] syz.2.1882[10043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.433779][T10043] syz.2.1882[10043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.482231][ T4301] usb 1-1: USB disconnect, device number 6 [ 469.997010][T10065] netlink: 'syz.4.1889': attribute type 10 has an invalid length. [ 470.007519][T10065] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1889'. [ 470.369920][T10074] can0: slcan on ttyS3. [ 470.742290][T10086] loop5: detected capacity change from 0 to 512 [ 470.750877][T10086] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 470.776095][T10086] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 470.787326][T10086] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1898: invalid indirect mapped block 2683928664 (level 1) [ 470.804755][T10086] EXT4-fs (loop5): Remounting filesystem read-only [ 470.812273][T10086] EXT4-fs (loop5): 1 truncate cleaned up [ 470.818278][T10086] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 470.839019][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 470.839036][ T26] audit: type=1326 audit(1746586962.480:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10085 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 470.868166][ T26] audit: type=1326 audit(1746586962.480:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10085 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 470.869683][T10086] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.1898: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 470.901359][ T26] audit: type=1326 audit(1746586962.510:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10085 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 470.988805][T10086] EXT4-fs (loop5): Remounting filesystem read-only [ 471.036186][ T26] audit: type=1326 audit(1746586962.680:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10085 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 471.079238][ T26] audit: type=1326 audit(1746586962.700:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10085 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 471.164729][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 471.344920][ T4302] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 471.450964][T10107] netlink: 'syz.4.1904': attribute type 10 has an invalid length. [ 471.468079][T10107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1904'. [ 471.488986][T10105] syz.1.1906[10105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.489094][T10105] syz.1.1906[10105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.545061][ T4302] usb 3-1: Using ep0 maxpacket: 8 [ 471.569623][ T4302] usb 3-1: config 93 has an invalid interface number: 31 but max is 0 [ 471.581032][ T4302] usb 3-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config [ 471.593302][ T4302] usb 3-1: config 93 has no interface number 0 [ 471.595326][T10073] can0 (unregistered): slcan off ttyS3. [ 471.609590][ T4302] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 471.631535][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.642778][ T4302] usb 3-1: Product: syz [ 471.649085][ T4302] usb 3-1: Manufacturer: syz [ 471.654026][ T4302] usb 3-1: SerialNumber: syz [ 471.668980][ T4302] usb 3-1: Found UVC 0.00 device syz (046d:08c3) [ 471.679974][ T4302] usb 3-1: No valid video chain found. [ 471.876445][ T22] usb 3-1: USB disconnect, device number 8 [ 472.330594][T10126] loop0: detected capacity change from 0 to 512 [ 472.368664][T10126] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 472.390396][T10126] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 472.399145][T10126] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1912: invalid indirect mapped block 2683928664 (level 1) [ 472.425486][T10126] EXT4-fs (loop0): Remounting filesystem read-only [ 472.432908][T10126] EXT4-fs (loop0): 1 truncate cleaned up [ 472.454973][T10126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 472.508039][ T26] audit: type=1326 audit(1746586964.150:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 472.512611][T10131] lo speed is unknown, defaulting to 1000 [ 472.537237][T10131] lo speed is unknown, defaulting to 1000 [ 472.561038][ T26] audit: type=1326 audit(1746586964.150:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 472.565252][T10126] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.1912: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 472.587491][ T26] audit: type=1326 audit(1746586964.150:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 472.626537][T10131] lo speed is unknown, defaulting to 1000 [ 472.644008][T10131] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 472.653154][ T26] audit: type=1326 audit(1746586964.150:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 472.676820][T10126] EXT4-fs (loop0): Remounting filesystem read-only [ 472.708393][T10131] lo speed is unknown, defaulting to 1000 [ 472.724728][T10131] lo speed is unknown, defaulting to 1000 [ 472.741268][ T26] audit: type=1326 audit(1746586964.150:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 472.765714][T10131] lo speed is unknown, defaulting to 1000 [ 472.775937][T10131] lo speed is unknown, defaulting to 1000 [ 472.782079][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 472.792020][T10131] lo speed is unknown, defaulting to 1000 [ 472.806058][T10131] lo speed is unknown, defaulting to 1000 [ 472.826404][T10128] rdma_rxe: rxe_register_device failed with error -23 [ 472.854120][T10128] rdma_rxe: failed to add team_slave_0 [ 472.889771][T10140] can0: slcan on ttyS3. [ 472.917178][T10128] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.968325][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1913'. [ 472.999086][T10143] 9pnet_virtio: no channels available for device 127.0.0.1 [ 473.076880][T10128] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.165204][T10128] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.264228][T10128] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.682007][T10159] lo speed is unknown, defaulting to 1000 [ 473.716329][T10165] syz.4.1925[10165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.716436][T10165] syz.4.1925[10165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.775164][T10139] can0 (unregistered): slcan off ttyS3. [ 473.895054][ T4296] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 473.916235][T10168] loop0: detected capacity change from 0 to 1024 [ 473.925660][T10168] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 473.934441][T10168] EXT4-fs (loop0): orphan cleanup on readonly fs [ 473.942202][T10168] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 473.952245][T10168] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #3: comm syz.0.1926: mark_inode_dirty error [ 473.967966][T10168] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1926: Invalid block bitmap block 3 in block_group 0 [ 473.982281][T10168] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 473.994753][T10168] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #3: comm syz.0.1926: mark_inode_dirty error [ 474.009002][T10168] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm syz.0.1926: lblock 6 mapped to illegal pblock 1 (length 1) [ 474.023654][T10168] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.1926: lblock 0 mapped to illegal pblock 48 (length 1) [ 474.041082][T10168] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.1926: Failed to acquire dquot type 0 [ 474.053239][T10168] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 49: comm syz.0.1926: lblock 1 mapped to illegal pblock 49 (length 1) [ 474.069424][T10168] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.1926: Failed to acquire dquot type 0 [ 474.082883][T10168] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 474.092988][T10168] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #15: comm syz.0.1926: mark_inode_dirty error [ 474.104459][ T4296] usb 3-1: Using ep0 maxpacket: 8 [ 474.110597][T10168] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 474.121591][T10168] EXT4-fs (loop0): 1 orphan inode deleted [ 474.127632][ T4296] usb 3-1: config 93 has an invalid interface number: 31 but max is 0 [ 474.136248][T10168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 474.145346][ T4296] usb 3-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config [ 474.165031][ T4296] usb 3-1: config 93 has no interface number 0 [ 474.178373][ T4296] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 474.195076][ T4296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.203319][ T4296] usb 3-1: Product: syz [ 474.208655][ T4296] usb 3-1: Manufacturer: syz [ 474.215406][ T4296] usb 3-1: SerialNumber: syz [ 474.215642][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 474.231435][ T4296] usb 3-1: Found UVC 0.00 device syz (046d:08c3) [ 474.238038][ T4296] usb 3-1: No valid video chain found. [ 474.434275][ T4296] usb 3-1: USB disconnect, device number 9 [ 474.444338][T10177] 9pnet_virtio: no channels available for device 127.0.0.1 [ 474.818046][T10185] netlink: 'syz.0.1933': attribute type 10 has an invalid length. [ 474.847656][T10185] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 475.121000][T10191] can0: slcan on ttyS3. [ 475.200311][T10128] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.284593][T10128] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.332648][T10128] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.391707][T10128] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.722436][T10198] loop5: detected capacity change from 0 to 1024 [ 475.793597][T10198] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 475.823180][T10198] EXT4-fs (loop5): orphan cleanup on readonly fs [ 475.855328][T10198] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 475.892067][T10198] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #3: comm syz.5.1938: mark_inode_dirty error [ 475.935682][T10198] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.1938: Invalid block bitmap block 3 in block_group 0 [ 475.963539][T10198] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 475.983653][T10198] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #3: comm syz.5.1938: mark_inode_dirty error [ 475.997740][T10198] __quota_error: 19 callbacks suppressed [ 475.997831][T10198] Quota error (device loop5): write_blk: dquota write failed [ 476.015390][T10198] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm syz.5.1938: lblock 6 mapped to illegal pblock 1 (length 1) [ 476.033371][T10198] Quota error (device loop5): write_blk: dquota write failed [ 476.055098][T10209] 9pnet_virtio: no channels available for device 127.0.0.1 [ 476.061640][T10198] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 476.084941][T10198] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.1938: lblock 0 mapped to illegal pblock 48 (length 1) [ 476.108874][T10198] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 476.118172][T10198] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1938: Failed to acquire dquot type 0 [ 476.133721][T10198] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 49: comm syz.5.1938: lblock 1 mapped to illegal pblock 49 (length 1) [ 476.152211][T10198] Quota error (device loop5): do_insert_tree: Can't read tree quota block 1 [ 476.161881][T10190] can0 (unregistered): slcan off ttyS3. [ 476.162290][T10198] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 476.194938][T10198] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1938: Failed to acquire dquot type 0 [ 476.209239][T10198] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 476.219639][T10198] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #15: comm syz.5.1938: mark_inode_dirty error [ 476.232127][T10198] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 476.242910][T10198] EXT4-fs (loop5): 1 orphan inode deleted [ 476.249206][T10198] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 476.323799][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 476.995157][ T4296] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 477.215290][ T4296] usb 3-1: Using ep0 maxpacket: 8 [ 477.229044][ T4296] usb 3-1: config 93 has an invalid interface number: 31 but max is 0 [ 477.267507][ T4296] usb 3-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config [ 477.311744][ T4296] usb 3-1: config 93 has no interface number 0 [ 477.330684][T10248] 9pnet_virtio: no channels available for device 127.0.0.1 [ 477.360557][ T4296] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 477.391260][ T4296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.441069][ T4296] usb 3-1: Product: syz [ 477.458089][ T4296] usb 3-1: Manufacturer: syz [ 477.478042][ T4296] usb 3-1: SerialNumber: syz [ 477.498537][T10256] syz.0.1954[10256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.498646][T10256] syz.0.1954[10256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.519755][ T4296] usb 3-1: Found UVC 0.00 device syz (046d:08c3) [ 477.584538][ T4296] usb 3-1: No valid video chain found. [ 477.603090][T10256] loop0: detected capacity change from 0 to 512 [ 477.642380][T10256] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 477.703852][T10256] EXT4-fs (loop0): 1 truncate cleaned up [ 477.721903][T10256] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 477.733573][ T22] usb 3-1: USB disconnect, device number 10 [ 477.883049][ T26] audit: type=1326 audit(1746586969.520:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 477.889537][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 477.910737][ T26] audit: type=1326 audit(1746586969.520:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 478.061136][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 478.149705][ T26] audit: type=1326 audit(1746586969.790:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 478.195846][ T26] audit: type=1326 audit(1746586969.840:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.4.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 478.278619][T10267] syz.1.1958[10267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.278747][T10267] syz.1.1958[10267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.762234][T10287] 9pnet_virtio: no channels available for device 127.0.0.1 [ 479.455033][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 479.765077][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 479.780609][ T22] usb 1-1: config 93 has an invalid interface number: 31 but max is 0 [ 479.903635][ T22] usb 1-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config [ 480.044864][ T22] usb 1-1: config 93 has no interface number 0 [ 480.083216][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 480.273377][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.281897][ T22] usb 1-1: Product: syz [ 480.286421][ T22] usb 1-1: Manufacturer: syz [ 480.291050][ T22] usb 1-1: SerialNumber: syz [ 480.310886][ T22] usb 1-1: Found UVC 0.00 device syz (046d:08c3) [ 480.334590][ T22] usb 1-1: No valid video chain found. [ 480.437830][T10319] tipc: Enabling of bearer rejected, failed to enable media [ 480.469290][T10322] 9pnet_virtio: no channels available for device 127.0.0.1 [ 480.519012][ T22] usb 1-1: USB disconnect, device number 7 [ 480.734786][T10328] loop4: detected capacity change from 0 to 1024 [ 480.756770][T10328] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 480.779968][T10328] EXT4-fs (loop4): orphan cleanup on readonly fs [ 480.801988][T10328] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 480.849280][T10328] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #3: comm syz.4.1981: mark_inode_dirty error [ 480.882126][T10328] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.1981: Invalid block bitmap block 3 in block_group 0 [ 480.918775][T10328] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 480.938712][T10328] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #3: comm syz.4.1981: mark_inode_dirty error [ 480.978444][T10328] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm syz.4.1981: lblock 6 mapped to illegal pblock 1 (length 1) [ 480.995388][T10328] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.1981: lblock 0 mapped to illegal pblock 48 (length 1) [ 481.015438][T10328] __quota_error: 3 callbacks suppressed [ 481.015454][T10328] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 481.041501][T10328] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1981: Failed to acquire dquot type 0 [ 481.069317][T10328] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 49: comm syz.4.1981: lblock 1 mapped to illegal pblock 49 (length 1) [ 481.101870][T10328] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1 [ 481.140715][T10328] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 481.164132][T10328] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1981: Failed to acquire dquot type 0 [ 481.192614][T10328] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 481.215305][T10328] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #15: comm syz.4.1981: mark_inode_dirty error [ 481.241730][T10328] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 481.274441][T10328] EXT4-fs (loop4): 1 orphan inode deleted [ 481.287907][T10328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 481.605282][T10341] syz.5.1985[10341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.605401][T10341] syz.5.1985[10341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 482.365939][T10343] lo speed is unknown, defaulting to 1000 [ 482.446264][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 482.690505][T10356] tipc: Enabling of bearer rejected, failed to enable media [ 482.722558][T10355] loop2: detected capacity change from 0 to 1024 [ 482.798576][T10355] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 483.054199][T10366] rdma_rxe: rxe_register_device failed with error -23 [ 483.066187][T10366] rdma_rxe: failed to add team_slave_0 [ 483.581055][T10353] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 483.596736][T10353] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 483.609215][T10353] EXT4-fs (loop2): This should not happen!! Data will be lost [ 483.609215][T10353] [ 483.619183][T10353] EXT4-fs (loop2): Total free blocks count 0 [ 483.625440][T10353] EXT4-fs (loop2): Free/Dirty block details [ 483.631449][T10353] EXT4-fs (loop2): free_blocks=68451041280 [ 483.637368][T10353] EXT4-fs (loop2): dirty_blocks=32 [ 483.642567][T10353] EXT4-fs (loop2): Block reservation details [ 483.648667][T10353] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 483.811567][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 483.855366][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1993'. [ 483.865171][T10373] netlink: 'syz.0.1994': attribute type 10 has an invalid length. [ 483.873045][T10373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1994'. [ 483.968819][T10373] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 484.007442][T10365] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.090424][T10365] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.155330][T10387] can0: slcan on ttyS3. [ 484.234449][T10365] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.285764][T10386] can0 (unregistered): slcan off ttyS3. [ 484.319862][T10365] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.503585][T10365] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.534774][T10365] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.561937][T10365] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.577364][T10395] tipc: Enabling of bearer rejected, failed to enable media [ 484.619816][T10365] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.702558][T10397] syz.0.2003[10397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.702664][T10397] syz.0.2003[10397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.894556][T10409] loop2: detected capacity change from 0 to 1024 [ 484.927214][ T26] audit: type=1326 audit(1746586976.570:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10411 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 484.957450][T10409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 484.972270][ T26] audit: type=1326 audit(1746586976.590:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10411 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 485.084036][ T26] audit: type=1326 audit(1746586976.590:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10411 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 485.149100][T10418] can0: slcan on ttyS3. [ 485.165952][ T26] audit: type=1326 audit(1746586976.590:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10411 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 485.218344][ T26] audit: type=1326 audit(1746586976.590:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10411 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 485.456563][T10417] can0 (unregistered): slcan off ttyS3. [ 485.785975][T10408] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 485.801421][T10408] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 485.813794][T10408] EXT4-fs (loop2): This should not happen!! Data will be lost [ 485.813794][T10408] [ 485.823579][T10408] EXT4-fs (loop2): Total free blocks count 0 [ 485.829690][T10408] EXT4-fs (loop2): Free/Dirty block details [ 485.835706][T10408] EXT4-fs (loop2): free_blocks=68451041280 [ 485.841588][T10408] EXT4-fs (loop2): dirty_blocks=32 [ 485.846795][T10408] EXT4-fs (loop2): Block reservation details [ 485.852835][T10408] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 485.992105][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 486.090159][T10427] tipc: Enabling of bearer rejected, failed to enable media [ 486.205504][ T26] audit: type=1326 audit(1746586977.850:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 486.247492][T10432] loop1: detected capacity change from 0 to 512 [ 486.253951][ T26] audit: type=1326 audit(1746586977.870:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 486.259725][T10436] can0: slcan on ttyS3. [ 486.284155][ T26] audit: type=1326 audit(1746586977.870:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 486.309034][ T26] audit: type=1326 audit(1746586977.880:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 486.320211][T10432] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 486.335960][ T26] audit: type=1326 audit(1746586977.880:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 486.364128][ T26] audit: type=1326 audit(1746586977.880:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 486.387733][ T26] audit: type=1326 audit(1746586977.880:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 486.414352][ T26] audit: type=1326 audit(1746586977.880:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 486.415855][T10432] EXT4-fs (loop1): 1 truncate cleaned up [ 486.442799][ T26] audit: type=1326 audit(1746586977.880:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 486.468667][ T26] audit: type=1326 audit(1746586977.880:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 486.493877][T10432] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 486.560252][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 487.286880][T10467] tipc: Enabling of bearer rejected, failed to enable media [ 487.315508][T10448] can0 (unregistered): slcan off ttyS3. [ 487.407787][T10472] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 487.450332][T10474] siw: device registration error -23 [ 487.462907][T10475] can0: slcan on ttyS3. [ 487.587305][T10474] loop0: detected capacity change from 0 to 512 [ 487.653122][T10474] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 487.679779][T10474] EXT4-fs (loop0): 1 truncate cleaned up [ 487.696615][T10474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 488.251586][ T5012] libceph: connect (1)[c::]:6789 error -101 [ 488.351346][T10486] ceph: No mds server is up or the cluster is laggy [ 488.398750][ T5012] libceph: mon0 (1)[c::]:6789 connect error [ 488.482218][T10494] loop5: detected capacity change from 0 to 256 [ 488.487139][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 488.490618][T10494] exfat: Unknown parameter 'nameŠ}t' [ 488.502892][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 488.546345][T10473] can0 (unregistered): slcan off ttyS3. [ 489.523941][T10510] tipc: Enabling of bearer rejected, failed to enable media [ 489.672063][T10516] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 489.716591][T10521] loop5: detected capacity change from 0 to 1024 [ 489.731707][T10521] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 489.753312][T10521] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 489.783664][T10521] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #2: comm syz.5.2045: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 489.810947][T10521] EXT4-fs (loop5): no journal found [ 489.840551][T10524] siw: device registration error -23 [ 489.909824][T10524] loop4: detected capacity change from 0 to 512 [ 490.061360][T10524] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 490.078088][T10524] EXT4-fs (loop4): 1 truncate cleaned up [ 490.091322][T10524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 490.384732][ T22] libceph: connect (1)[c::]:6789 error -101 [ 490.440478][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 490.634405][T10529] can0: slcan on ttyS3. [ 490.772719][T10539] ceph: No mds server is up or the cluster is laggy [ 490.882537][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 490.984630][T10547] syz.4.2051[10547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.984740][T10547] syz.4.2051[10547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.095988][T10547] loop4: detected capacity change from 0 to 512 [ 491.129702][T10547] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 491.188210][T10528] can0 (unregistered): slcan off ttyS3. [ 491.199251][T10547] EXT4-fs (loop4): 1 truncate cleaned up [ 491.209318][T10547] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 491.441501][T10558] loop2: detected capacity change from 0 to 256 [ 491.476858][T10558] exfat: Unknown parameter 'nameŠ}t' [ 491.490987][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 491.590125][T10563] netlink: 'syz.1.2058': attribute type 10 has an invalid length. [ 491.609728][T10564] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 492.572476][T10538] process 'syz.5.2050' launched '/dev/fd/5' with NULL argv: empty string added [ 494.336872][T10600] $Hĸ: renamed from bond0 [ 494.343516][T10600] device $Hĸ entered promiscuous mode [ 494.351696][T10600] device bond_slave_0 entered promiscuous mode [ 494.359595][T10600] device bond_slave_1 entered promiscuous mode [ 494.366428][T10600] device dummy0 entered promiscuous mode [ 494.418183][T10604] syz.2.2069[10604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.418291][T10604] syz.2.2069[10604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.503480][T10613] loop0: detected capacity change from 0 to 2048 [ 494.537666][T10606] 9pnet: Could not find request transport: rd [ 494.553599][T10613] EXT4-fs: inline encryption not supported [ 494.562582][T10613] ext4: Unknown parameter 'audit' [ 494.577137][T10604] loop2: detected capacity change from 0 to 512 [ 494.585311][T10604] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 494.622014][T10604] EXT4-fs (loop2): 1 truncate cleaned up [ 494.628054][T10604] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 494.629893][T10613] loop0: detected capacity change from 0 to 256 [ 494.674642][T10613] exfat: Deprecated parameter 'namecase' [ 494.688576][ T26] kauditd_printk_skb: 159 callbacks suppressed [ 494.688592][ T26] audit: type=1326 audit(1746586986.330:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 494.751287][T10620] siw: device registration error -23 [ 494.767180][T10613] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 494.805841][T10620] loop4: detected capacity change from 0 to 512 [ 494.816808][ T26] audit: type=1326 audit(1746586986.370:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 494.854581][T10625] loop1: detected capacity change from 0 to 128 [ 494.863790][ T26] audit: type=1326 audit(1746586986.380:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 494.907638][ T26] audit: type=1326 audit(1746586986.380:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 494.930603][ T26] audit: type=1326 audit(1746586986.380:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 494.954207][ T26] audit: type=1326 audit(1746586986.380:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 494.977427][ T26] audit: type=1326 audit(1746586986.380:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 495.011664][T10625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 495.024152][ T26] audit: type=1326 audit(1746586986.380:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 495.034745][T10620] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 495.071767][T10625] ext4 filesystem being mounted at /408/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 495.072601][ T26] audit: type=1326 audit(1746586986.380:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 495.105149][ T26] audit: type=1326 audit(1746586986.380:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 495.214754][T10620] EXT4-fs (loop4): 1 truncate cleaned up [ 495.376682][T10620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 495.616918][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 495.674153][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 495.684329][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 495.834010][T10638] syz.4.2081[10638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.834117][T10638] syz.4.2081[10638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.919847][T10644] loop2: detected capacity change from 0 to 2048 [ 495.976564][T10644] loop2: p1 < > p4 < > [ 496.221208][T10648] rdma_rxe: rxe_register_device failed with error -23 [ 496.255197][T10648] rdma_rxe: failed to add team_slave_0 [ 496.387300][T10660] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.470417][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2084'. [ 497.275480][T10660] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.395538][T10660] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.433991][T10680] siw: device registration error -23 [ 497.471370][T10682] loop1: detected capacity change from 0 to 2048 [ 497.478479][T10680] loop2: detected capacity change from 0 to 512 [ 497.496656][T10682] EXT4-fs: inline encryption not supported [ 497.513163][T10682] ext4: Unknown parameter 'audit' [ 497.524573][T10660] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.585367][T10680] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 497.606349][T10680] EXT4-fs (loop2): 1 truncate cleaned up [ 497.613890][T10680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 497.682971][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 497.688069][T10682] loop1: detected capacity change from 0 to 256 [ 497.710052][T10682] exfat: Deprecated parameter 'namecase' [ 498.414229][T10690] lo speed is unknown, defaulting to 1000 [ 498.728923][T10689] loop4: detected capacity change from 0 to 2048 [ 498.738303][T10660] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.753647][T10660] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.773251][T10682] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 498.830406][T10660] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.057689][T10660] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.476703][T10701] syz.2.2097[10701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.476809][T10701] syz.2.2097[10701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.883971][T10711] loop4: detected capacity change from 0 to 1024 [ 501.045222][T10711] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 502.275185][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.345273][T10719] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 502.382935][T10710] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 502.395638][T10710] EXT4-fs (loop4): This should not happen!! Data will be lost [ 502.395638][T10710] [ 502.405716][T10710] EXT4-fs (loop4): Total free blocks count 0 [ 502.411754][T10710] EXT4-fs (loop4): Free/Dirty block details [ 502.417710][T10710] EXT4-fs (loop4): free_blocks=68451041280 [ 502.423781][T10710] EXT4-fs (loop4): dirty_blocks=32 [ 502.428963][T10710] EXT4-fs (loop4): Block reservation details [ 502.435017][T10710] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 502.620978][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 502.911678][T10735] loop4: detected capacity change from 0 to 2048 [ 503.010763][T10735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 503.042697][T10735] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 503.160672][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 503.222114][T10747] loop0: detected capacity change from 0 to 2048 [ 503.279356][T10747] loop0: p1 < > p4 < > [ 503.335444][T10753] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 503.351720][T10755] loop1: detected capacity change from 0 to 512 [ 503.373322][T10755] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 503.396140][T10753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.423346][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2116'. [ 503.423407][T10755] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 503.471593][T10755] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2117: invalid indirect mapped block 2683928664 (level 1) [ 503.512878][T10755] EXT4-fs (loop1): Remounting filesystem read-only [ 503.531976][T10755] EXT4-fs (loop1): 1 truncate cleaned up [ 503.560587][T10755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 503.669377][T10755] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.2117: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 503.747249][T10755] EXT4-fs (loop1): Remounting filesystem read-only [ 504.154447][ T4301] libceph: connect (1)[c::]:6789 error -101 [ 504.223688][ T4301] libceph: mon0 (1)[c::]:6789 connect error [ 504.475512][T10765] ceph: No mds server is up or the cluster is laggy [ 504.631963][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 504.746666][T10759] bond1 (unregistering): Released all slaves [ 505.391815][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 505.391831][ T26] audit: type=1326 audit(1746586997.030:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 505.421391][ T26] audit: type=1326 audit(1746586997.040:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 505.444557][ T26] audit: type=1326 audit(1746586997.040:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 505.469824][ T26] audit: type=1326 audit(1746586997.040:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ff898d2d0 code=0x7ffc0000 [ 505.579091][ T26] audit: type=1326 audit(1746586997.040:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ff898d2d0 code=0x7ffc0000 [ 506.100882][ T26] audit: type=1326 audit(1746586997.040:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 506.148568][ T26] audit: type=1326 audit(1746586997.040:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 506.212475][ T26] audit: type=1326 audit(1746586997.040:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 506.285067][ T26] audit: type=1326 audit(1746586997.040:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 506.307913][ T26] audit: type=1326 audit(1746586997.040:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 506.398370][T10809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2136'. [ 506.774526][T10832] loop4: detected capacity change from 0 to 2048 [ 506.801695][T10832] EXT4-fs: inline encryption not supported [ 506.831843][T10832] ext4: Unknown parameter 'audit' [ 506.910207][T10832] loop4: detected capacity change from 0 to 256 [ 506.917205][T10832] exfat: Deprecated parameter 'namecase' [ 506.929839][T10829] device syzkaller0 entered promiscuous mode [ 507.174353][T10832] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 508.158297][T10847] syz.1.2149[10847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.158410][T10847] syz.1.2149[10847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.535182][T10866] loop4: detected capacity change from 0 to 512 [ 509.578697][T10866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 509.683760][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 509.752107][T10870] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 509.752107][T10870] program syz.4.2157 not setting count and/or reply_len properly [ 513.146225][T10859] lo speed is unknown, defaulting to 1000 [ 513.444225][T10895] loop5: detected capacity change from 0 to 512 [ 513.479092][T10895] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 513.527728][T10895] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 513.554107][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 513.554123][ T26] audit: type=1326 audit(1746587005.190:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 513.587815][ T26] audit: type=1326 audit(1746587005.230:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 513.611895][T10895] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2165: invalid indirect mapped block 2683928664 (level 1) [ 513.655264][ T26] audit: type=1326 audit(1746587005.250:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 513.692943][T10895] EXT4-fs (loop5): Remounting filesystem read-only [ 513.705290][T10895] EXT4-fs (loop5): 1 truncate cleaned up [ 513.712415][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2168'. [ 513.731781][T10895] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 513.732889][ T26] audit: type=1326 audit(1746587005.250:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 513.769495][ T26] audit: type=1326 audit(1746587005.250:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 513.803348][ T26] audit: type=1326 audit(1746587005.250:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 513.833847][ T26] audit: type=1326 audit(1746587005.290:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 513.835610][T10895] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.2165: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 513.861075][ T26] audit: type=1326 audit(1746587005.290:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 513.911656][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2169'. [ 513.936049][T10895] EXT4-fs (loop5): Remounting filesystem read-only [ 513.964343][ T26] audit: type=1326 audit(1746587005.290:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 514.022876][ T26] audit: type=1326 audit(1746587005.290:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 514.170943][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 514.254501][T10923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2172'. [ 515.198540][T10933] device syzkaller0 entered promiscuous mode [ 516.090082][T10949] xt_CT: No such helper "pptp" [ 516.100585][T10951] loop1: detected capacity change from 0 to 2048 [ 516.144685][T10951] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 516.264282][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 516.411625][T10955] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 516.560082][T10958] syz.1.2180[10958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.560190][T10958] syz.1.2180[10958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.611576][T10958] loop1: detected capacity change from 0 to 512 [ 516.653310][T10958] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 516.696394][T10958] EXT4-fs (loop1): 1 truncate cleaned up [ 516.702612][T10958] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 516.903509][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 516.983310][T10962] loop1: detected capacity change from 0 to 512 [ 516.993897][T10962] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 517.007250][T10962] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 517.018346][T10962] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 517.032059][T10962] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.2181: iget: bad extended attribute block 19 [ 517.048335][T10962] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2181: couldn't read orphan inode 15 (err -117) [ 517.060905][T10962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 517.118781][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 517.272327][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.284742][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.292972][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.304684][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.312722][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.324531][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.332644][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.344133][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.354678][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.366777][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.374264][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.399153][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.407612][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.419403][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.427729][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.439620][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.448217][ T4296] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.486772][ T4296] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 517.603746][ T5012] libceph: connect (1)[c::]:6789 error -101 [ 517.611114][ T5012] libceph: mon0 (1)[c::]:6789 connect error [ 517.923429][ T22] libceph: connect (1)[c::]:6789 error -101 [ 517.963840][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 518.165855][T10973] ceph: No mds server is up or the cluster is laggy [ 518.420127][T10980] Invalid ELF header magic: != ELF [ 518.491160][T10982] loop1: detected capacity change from 0 to 512 [ 518.527933][T10982] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 518.563859][T10982] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 518.575883][T10982] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2188: invalid indirect mapped block 2683928664 (level 1) [ 518.590811][T10982] EXT4-fs (loop1): Remounting filesystem read-only [ 518.599250][T10982] EXT4-fs (loop1): 1 truncate cleaned up [ 518.608944][T10982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 518.664412][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 518.664426][ T26] audit: type=1326 audit(1746587010.300:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 518.753146][ T26] audit: type=1326 audit(1746587010.340:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 518.783799][ T26] audit: type=1326 audit(1746587010.340:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 518.824454][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 518.835417][ T26] audit: type=1326 audit(1746587010.340:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 518.844951][T10990] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 518.990842][T10996] loop1: detected capacity change from 0 to 512 [ 518.998466][T10996] ext3: Unknown parameter 'dont_appraise' [ 520.663815][ T26] audit: type=1326 audit(1746587012.300:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 520.665445][T11013] device syzkaller0 entered promiscuous mode [ 520.698681][ T26] audit: type=1326 audit(1746587012.300:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 520.754704][ T26] audit: type=1326 audit(1746587012.350:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 520.823484][T11021] loop5: detected capacity change from 0 to 512 [ 520.833555][ T26] audit: type=1326 audit(1746587012.350:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 520.862244][T11021] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 520.874414][ T26] audit: type=1326 audit(1746587012.350:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 520.898116][ T26] audit: type=1326 audit(1746587012.370:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 520.930892][T11021] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 520.953024][T11021] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2201: invalid indirect mapped block 2683928664 (level 1) [ 521.004984][T11021] EXT4-fs (loop5): Remounting filesystem read-only [ 521.012115][T11021] EXT4-fs (loop5): 1 truncate cleaned up [ 521.060958][T11021] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 521.187448][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 521.291101][T11037] syz.5.2209[11037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.291209][T11037] syz.5.2209[11037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.338123][T11037] loop5: detected capacity change from 0 to 512 [ 521.358034][T11037] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 521.426854][T11037] EXT4-fs (loop5): 1 truncate cleaned up [ 521.432597][T11037] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 521.783097][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 522.208724][T11052] 9pnet_fd: Insufficient options for proto=fd [ 524.033735][T11027] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2205'. [ 524.099007][T11044] device syzkaller0 entered promiscuous mode [ 524.116529][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2211'. [ 524.530847][T11071] loop5: detected capacity change from 0 to 512 [ 524.579270][T11071] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 524.632830][T11074] loop4: detected capacity change from 0 to 512 [ 524.643132][T11071] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 524.669075][T11071] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2219: invalid indirect mapped block 2683928664 (level 1) [ 524.695557][T11071] EXT4-fs (loop5): Remounting filesystem read-only [ 524.702530][T11071] EXT4-fs (loop5): 1 truncate cleaned up [ 524.708975][T11071] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 524.723590][T11077] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 524.728284][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 524.728301][ T26] audit: type=1326 audit(1746587016.360:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.5.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 524.747813][T11074] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.2220: dx entry: limit 1024 != root limit 124 [ 524.766803][ T26] audit: type=1326 audit(1746587016.380:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.5.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 524.799174][T11077] EXT4-fs (loop5): Remounting filesystem read-only [ 524.814912][ T26] audit: type=1326 audit(1746587016.420:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.5.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 524.833250][T11074] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2220: Corrupt directory, running e2fsck is recommended [ 524.871843][ T26] audit: type=1326 audit(1746587016.420:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.5.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 524.874633][T11074] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 524.914918][ T26] audit: type=1326 audit(1746587016.420:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.5.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 524.921520][T11074] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.2220: corrupted in-inode xattr [ 524.951913][ T26] audit: type=1326 audit(1746587016.590:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 524.956591][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 524.976683][T11074] EXT4-fs (loop4): Remounting filesystem read-only [ 524.992905][T11074] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2220: couldn't read orphan inode 15 (err -117) [ 525.006039][ T26] audit: type=1326 audit(1746587016.620:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 525.029702][T11074] EXT4-fs (loop4): Remounting filesystem read-only [ 525.036395][T11074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 525.068578][ T26] audit: type=1326 audit(1746587016.640:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 525.144090][ T26] audit: type=1326 audit(1746587016.640:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 525.167567][ T26] audit: type=1326 audit(1746587016.640:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 525.503161][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 528.074451][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 528.316492][T11123] loop0: detected capacity change from 0 to 512 [ 528.408799][T11123] EXT4-fs (loop0): 1 orphan inode deleted [ 528.431752][T11123] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 528.448556][T11123] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.520993][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 528.569267][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2235'. [ 528.670816][T11131] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067968) [ 528.696241][T11131] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 529.061157][T11150] device syzkaller0 entered promiscuous mode [ 529.327334][ T5619] libceph: connect (1)[c::]:6789 error -101 [ 529.340401][ T5619] libceph: mon0 (1)[c::]:6789 connect error [ 529.533779][T11154] ceph: No mds server is up or the cluster is laggy [ 530.463262][T11181] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 530.724114][T11185] loop5: detected capacity change from 0 to 164 [ 531.808847][T11192] loop5: detected capacity change from 0 to 1024 [ 531.889743][T11192] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 532.709356][T11191] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 532.726439][T11191] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 532.739240][T11191] EXT4-fs (loop5): This should not happen!! Data will be lost [ 532.739240][T11191] [ 532.749264][T11191] EXT4-fs (loop5): Total free blocks count 0 [ 532.755547][T11191] EXT4-fs (loop5): Free/Dirty block details [ 532.761561][T11191] EXT4-fs (loop5): free_blocks=68451041280 [ 532.767440][T11191] EXT4-fs (loop5): dirty_blocks=32 [ 532.772588][T11191] EXT4-fs (loop5): Block reservation details [ 532.778633][T11191] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 532.926043][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 534.560724][T11207] netlink: 'syz.4.2257': attribute type 10 has an invalid length. [ 534.568822][T11207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2257'. [ 534.973450][T11221] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 535.125030][T11215] rdma_rxe: rxe_register_device failed with error -23 [ 535.132042][T11215] rdma_rxe: failed to add team_slave_0 [ 535.563487][ T22] libceph: connect (1)[c::]:6789 error -101 [ 535.680756][T11225] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.798574][T11228] ceph: No mds server is up or the cluster is laggy [ 535.830916][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 535.898232][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2259'. [ 536.101266][T11225] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.963777][T11225] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.078540][T11225] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.221609][T11225] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.326717][T11225] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.463842][T11225] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.479238][T11225] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.618416][T11265] loop2: detected capacity change from 0 to 128 [ 537.727825][T11272] netlink: 'syz.4.2274': attribute type 10 has an invalid length. [ 537.759205][T11272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2274'. [ 538.702024][T11308] netlink: 'syz.2.2291': attribute type 3 has an invalid length. [ 538.960548][T11311] infiniband syz1: set down [ 538.971066][T11311] infiniband syz1: added syz_tun [ 539.073039][T11311] RDS/IB: syz1: added [ 539.086717][T11311] smc: adding ib device syz1 with port count 1 [ 539.124012][T11311] smc: ib device syz1 port 1 has pnetid [ 539.703221][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 539.703236][ T26] audit: type=1326 audit(1746587031.340:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 539.770551][ T26] audit: type=1326 audit(1746587031.380:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 539.837017][ T26] audit: type=1326 audit(1746587031.380:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 539.884054][T11329] netlink: 'syz.4.2300': attribute type 10 has an invalid length. [ 539.885694][T11327] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2299'. [ 539.930928][T11329] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 540.689459][T11359] netlink: 'syz.5.2313': attribute type 10 has an invalid length. [ 540.725902][T11359] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 541.807124][T11369] lo speed is unknown, defaulting to 1000 [ 541.868401][T11357] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 541.895485][T11357] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 541.981727][T11357] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 542.026357][T11357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 542.064494][T11357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 542.088386][T11357] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 542.095924][T11357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 542.104287][T11357] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 542.128553][T11357] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 542.141517][T11357] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 542.163777][T11357] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 542.180076][T11357] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 542.199531][T11357] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 542.226368][T11357] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 542.243184][T11357] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 542.358794][T11387] syz.0.2324[11387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.358903][T11387] syz.0.2324[11387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.458897][T11386] loop2: detected capacity change from 0 to 1024 [ 542.499054][T11395] netlink: 'syz.5.2327': attribute type 10 has an invalid length. [ 542.505867][T11386] EXT4-fs: Ignoring removed mblk_io_submit option [ 542.523707][T11386] EXT4-fs: Ignoring removed nobh option [ 542.545877][T11386] EXT4-fs: Ignoring removed bh option [ 542.595397][T11386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 542.674326][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 542.785259][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 543.140374][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2338'. [ 543.334410][ T26] audit: type=1326 audit(1746587034.970:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 543.361388][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'. [ 543.398994][ T26] audit: type=1326 audit(1746587034.970:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 543.478858][ T26] audit: type=1326 audit(1746587035.000:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 543.622084][T11439] netlink: 'syz.0.2342': attribute type 10 has an invalid length. [ 543.657137][ T26] audit: type=1326 audit(1746587035.300:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 543.708425][ T26] audit: type=1326 audit(1746587035.300:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x7ffc0000 [ 544.065055][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 544.176455][ T4267] Bluetooth: hci3: command 0x0c1a tx timeout [ 544.176960][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 544.902833][T11458] lo speed is unknown, defaulting to 1000 [ 544.929097][T11459] loop4: detected capacity change from 0 to 256 [ 544.937661][ T47] Bluetooth: hci5: command 0x0c1a tx timeout [ 544.943764][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 545.631479][T11483] netlink: 'syz.2.2359': attribute type 10 has an invalid length. [ 545.799744][ T5619] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 546.016929][ T5619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.038759][ T5619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.059330][ T5619] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 546.094475][ T5619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.144948][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 546.152654][ T5619] usb 1-1: config 0 descriptor?? [ 546.402182][ T5619] usbhid 1-1:0.0: can't add hid device: -71 [ 546.418332][ T5619] usbhid: probe of 1-1:0.0 failed with error -71 [ 546.446551][ T5619] usb 1-1: USB disconnect, device number 8 [ 546.575369][T11516] netlink: 'syz.4.2372': attribute type 10 has an invalid length. [ 546.648284][T11519] netlink: 'syz.1.2373': attribute type 32 has an invalid length. [ 546.661152][T11519] random: crng reseeded on system resumption [ 546.713864][ T26] audit: type=1326 audit(1746587038.350:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.1.2373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f791cd8e969 code=0x0 [ 546.828254][T11526] smc: net device bond0 applied user defined pnetid SYZ2 [ 546.837481][T11526] smc: net device bond0 erased user defined pnetid SYZ2 [ 546.852224][T11527] loop1: detected capacity change from 0 to 1024 [ 546.898245][T11527] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 546.922357][T11527] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 546.953111][T11527] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.2373: Failed to acquire dquot type 0 [ 546.983814][T11527] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 546.993423][T11535] loop0: detected capacity change from 0 to 2048 [ 547.006200][T11527] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #13: comm syz.1.2373: corrupted inode contents [ 547.023941][T11527] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #13: comm syz.1.2373: mark_inode_dirty error [ 547.036386][T11527] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #13: comm syz.1.2373: corrupted inode contents [ 547.049552][ T4267] Bluetooth: hci5: command 0x0406 tx timeout [ 547.049570][T11460] Bluetooth: hci4: command 0x0406 tx timeout [ 547.063941][T11527] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.2373: mark_inode_dirty error [ 547.086359][T11535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 547.104982][ T4263] Bluetooth: hci3: command 0x0406 tx timeout [ 547.123904][T11527] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #13: comm syz.1.2373: corrupted inode contents [ 547.178242][T11527] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 547.205736][T11527] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #13: comm syz.1.2373: corrupted inode contents [ 547.231986][T11527] EXT4-fs error (device loop1): ext4_truncate:4312: inode #13: comm syz.1.2373: mark_inode_dirty error [ 547.254233][T11527] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 547.301307][T11527] EXT4-fs (loop1): 1 truncate cleaned up [ 547.311553][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 547.316061][T11527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 547.462372][T11540] rdma_rxe: rxe_register_device failed with error -23 [ 547.485271][T11540] rdma_rxe: failed to add team_slave_0 [ 547.619976][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2379'. [ 548.564222][T11527] lo speed is unknown, defaulting to 1000 [ 548.671366][T11563] smc: net device bond0 applied user defined pnetid SYZ2 [ 548.684371][T11563] smc: net device bond0 erased user defined pnetid SYZ2 [ 548.876417][T11569] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 549.043889][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 549.234928][ T4302] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 549.306207][T11582] loop4: detected capacity change from 0 to 1024 [ 549.333443][T11582] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 549.366234][T11582] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 549.383163][T11582] JBD2: no valid journal superblock found [ 549.389219][T11582] EXT4-fs (loop4): error loading journal [ 549.404930][ T4302] usb 1-1: device descriptor read/64, error -71 [ 549.489210][T11582] netlink: 'syz.4.2396': attribute type 13 has an invalid length. [ 549.674991][ T4302] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 549.844941][ T4302] usb 1-1: device descriptor read/64, error -71 [ 549.965047][ T4302] usb usb1-port1: attempt power cycle [ 550.036324][T11594] 9pnet: p9_errstr2errno: server reported unknown error [ 550.132775][T11591] smc: net device bond0 applied user defined pnetid SYZ2 [ 550.154373][T11592] smc: net device bond0 erased user defined pnetid SYZ2 [ 550.299019][T11598] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 550.378041][ T4302] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 550.439051][ T4302] usb 1-1: device descriptor read/8, error -71 [ 550.981104][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2403'. [ 551.240418][ T26] audit: type=1326 audit(1746587042.880:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 551.300829][ T26] audit: type=1326 audit(1746587042.940:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0cb8e969 code=0x7ffc0000 [ 551.385318][T11617] loop2: detected capacity change from 0 to 1024 [ 551.431100][T11617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 551.681479][T11628] loop1: detected capacity change from 0 to 512 [ 551.684348][ T4302] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 551.716902][T11628] EXT4-fs: Ignoring removed mblk_io_submit option [ 551.728657][ T4302] usb 1-1: device descriptor read/8, error -71 [ 551.735977][T11628] ext3: Unknown parameter 'seclabel' [ 551.898301][ T4302] usb usb1-port1: unable to enumerate USB device [ 552.269014][T11614] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 552.285513][T11614] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 552.298265][T11614] EXT4-fs (loop2): This should not happen!! Data will be lost [ 552.298265][T11614] [ 552.308695][T11614] EXT4-fs (loop2): Total free blocks count 0 [ 552.314852][T11614] EXT4-fs (loop2): Free/Dirty block details [ 552.320857][T11614] EXT4-fs (loop2): free_blocks=68451041280 [ 552.326803][T11614] EXT4-fs (loop2): dirty_blocks=32 [ 552.331991][T11614] EXT4-fs (loop2): Block reservation details [ 552.338333][T11614] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 552.549089][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 553.538849][T11639] lo speed is unknown, defaulting to 1000 [ 553.902976][T11646] smc: net device bond0 applied user defined pnetid SYZ2 [ 553.948548][T11646] smc: net device bond0 erased user defined pnetid SYZ2 [ 554.954735][T11661] tipc: Enabling of bearer rejected, failed to enable media [ 556.232078][T11676] loop0: detected capacity change from 0 to 2048 [ 556.281019][T11676] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 556.282122][T11680] netlink: 'syz.2.2429': attribute type 10 has an invalid length. [ 556.328454][T11683] smc: net device bond0 applied user defined pnetid SYZ2 [ 556.345037][ T4296] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 556.346516][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 556.377851][T11683] smc: net device bond0 erased user defined pnetid SYZ2 [ 556.514874][ T4296] usb 5-1: device descriptor read/64, error -71 [ 557.539248][T11705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2439'. [ 557.569238][ T4296] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 557.735192][ T4296] usb 5-1: device descriptor read/64, error -71 [ 557.855207][ T4296] usb usb5-port1: attempt power cycle [ 557.882162][T11712] loop1: detected capacity change from 0 to 1024 [ 557.999791][ T26] audit: type=1326 audit(1746587049.640:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 558.014351][T11715] loop2: detected capacity change from 0 to 512 [ 558.046156][ T26] audit: type=1326 audit(1746587049.640:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 558.070084][T11712] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 558.084526][T11715] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 558.095447][ T26] audit: type=1326 audit(1746587049.640:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 558.107486][T11715] EXT4-fs (loop2): 1 truncate cleaned up [ 558.118192][ T26] audit: type=1326 audit(1746587049.640:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 558.136524][T11715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 558.147100][ T26] audit: type=1326 audit(1746587049.640:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 558.178887][ T26] audit: type=1326 audit(1746587049.640:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 558.201946][ T26] audit: type=1326 audit(1746587049.640:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 558.224812][ T26] audit: type=1326 audit(1746587049.640:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 558.278277][ T26] audit: type=1326 audit(1746587049.640:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 558.348394][ T26] audit: type=1326 audit(1746587049.640:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 558.404893][ T4296] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 558.407416][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 558.609253][ T4296] usb 5-1: device descriptor read/8, error -71 [ 558.764259][T11711] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 558.781353][T11711] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 558.793795][T11711] EXT4-fs (loop1): This should not happen!! Data will be lost [ 558.793795][T11711] [ 558.804221][T11711] EXT4-fs (loop1): Total free blocks count 0 [ 558.810317][T11711] EXT4-fs (loop1): Free/Dirty block details [ 558.816312][T11711] EXT4-fs (loop1): free_blocks=68451041280 [ 558.822378][T11711] EXT4-fs (loop1): dirty_blocks=32 [ 558.827820][T11711] EXT4-fs (loop1): Block reservation details [ 558.833898][T11711] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 559.020860][T11724] 9pnet_fd: Insufficient options for proto=fd [ 559.054293][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 559.207803][T11727] loop1: detected capacity change from 0 to 512 [ 559.241385][T11727] EXT4-fs: Ignoring removed nobh option [ 559.248133][T11727] EXT4-fs: Ignoring removed bh option [ 559.298872][T11727] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2445: invalid indirect mapped block 256 (level 2) [ 559.321910][T11727] EXT4-fs (loop1): 2 truncates cleaned up [ 559.328806][T11727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 559.855480][T11734] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 560.426306][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 560.577543][T11755] loop1: detected capacity change from 0 to 512 [ 560.591830][T11755] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 560.607139][T11755] EXT4-fs (loop1): 1 truncate cleaned up [ 560.613127][T11755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 560.719404][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 560.735286][T11759] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2455'. [ 560.754476][T11761] loop0: detected capacity change from 0 to 1024 [ 560.812141][T11761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 560.817939][T11765] can0: slcan on ttyS3. [ 560.820984][ T5619] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 561.264623][ T5619] usb 3-1: device descriptor read/64, error -71 [ 561.555101][ T5619] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 561.915970][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 562.055300][ T5619] usb 3-1: device descriptor read/64, error -71 [ 562.185148][ T5619] usb usb3-port1: attempt power cycle [ 562.209001][T11778] loop5: detected capacity change from 0 to 512 [ 562.230993][T11778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 562.257096][T11778] EXT4-fs (loop5): orphan cleanup on readonly fs [ 562.270222][T11778] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2461: bg 0: block 248: padding at end of block bitmap is not set [ 562.295943][T11763] can0 (unregistered): slcan off ttyS3. [ 562.307545][T11778] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.2461: Failed to acquire dquot type 1 [ 562.343836][T11778] EXT4-fs (loop5): 1 truncate cleaned up [ 562.364012][T11778] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 562.452104][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 562.454977][T11787] 9pnet_fd: Insufficient options for proto=fd [ 562.548106][T11791] loop5: detected capacity change from 0 to 512 [ 562.570506][T11791] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 562.586355][T11791] EXT4-fs (loop5): 1 truncate cleaned up [ 562.593711][T11791] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 562.604871][ T5619] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 562.645874][ T5619] usb 3-1: device descriptor read/8, error -71 [ 562.658832][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 562.787695][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.918453][ T5619] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 562.961579][ T5619] usb 3-1: device descriptor read/8, error -71 [ 563.164986][ T5619] usb usb3-port1: unable to enumerate USB device [ 564.129743][T11818] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 564.143994][T11820] 9pnet_fd: Insufficient options for proto=fd [ 564.179175][ T26] kauditd_printk_skb: 144 callbacks suppressed [ 564.179192][ T26] audit: type=1326 audit(1746587055.820:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 564.180731][T11822] can0: slcan on ttyS3. [ 564.188573][ T26] audit: type=1326 audit(1746587055.830:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 564.252486][T11824] loop5: detected capacity change from 0 to 512 [ 564.261572][ T26] audit: type=1326 audit(1746587055.830:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 564.309575][ T26] audit: type=1326 audit(1746587055.830:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 564.312856][T11825] loop4: detected capacity change from 0 to 1024 [ 564.337736][ T26] audit: type=1326 audit(1746587055.830:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 564.363283][T11824] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 564.374351][T11824] EXT4-fs (loop5): 1 truncate cleaned up [ 564.380532][T11824] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 564.423761][ T26] audit: type=1326 audit(1746587055.830:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 564.476072][T11825] EXT4-fs: Ignoring removed orlov option [ 564.516690][T11825] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 564.537175][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 564.562536][ T26] audit: type=1326 audit(1746587055.830:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 564.665383][ T26] audit: type=1326 audit(1746587055.830:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 564.722391][ T26] audit: type=1326 audit(1746587055.830:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 564.794522][ T26] audit: type=1326 audit(1746587055.830:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.5.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25d118e969 code=0x7ffc0000 [ 564.998871][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 565.067268][T11854] loop5: detected capacity change from 0 to 164 [ 565.150692][T11854] device ipip0 entered promiscuous mode [ 565.216869][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2489'. [ 565.405012][ T5619] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 565.435588][T11821] can0 (unregistered): slcan off ttyS3. [ 565.655035][ T5619] usb 1-1: device descriptor read/64, error -71 [ 566.012588][ T5619] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 566.208531][ T5619] usb 1-1: device descriptor read/64, error -71 [ 566.281733][T11867] loop5: detected capacity change from 0 to 256 [ 566.295734][T11867] exfat: Unknown parameter 'nameŠ}t' [ 566.413536][ T5619] usb usb1-port1: attempt power cycle [ 566.466086][T11870] device wg2 left promiscuous mode [ 567.055068][ T5619] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 567.225672][ T5619] usb 1-1: device descriptor read/8, error -71 [ 567.444670][T11881] loop2: detected capacity change from 0 to 256 [ 567.535044][ T5619] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 567.595644][ T5619] usb 1-1: device descriptor read/8, error -71 [ 567.729545][ T5619] usb usb1-port1: unable to enumerate USB device [ 568.106408][T11900] can0: slcan on ttyS3. [ 568.311794][T11911] loop5: detected capacity change from 0 to 256 [ 568.341235][T11911] exfat: Unknown parameter 'nameŠ}t' [ 568.523852][T11896] lo speed is unknown, defaulting to 1000 [ 569.635726][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 569.635745][ T26] audit: type=1326 audit(1746587061.280:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.0.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 569.656391][T11930] loop4: detected capacity change from 0 to 512 [ 569.700979][T11930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 569.705401][ T26] audit: type=1326 audit(1746587061.280:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.0.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 569.746477][T11930] EXT4-fs (loop4): 1 truncate cleaned up [ 569.754696][T11930] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 569.797228][ T26] audit: type=1326 audit(1746587061.310:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.0.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 569.830546][T11926] rdma_rxe: rxe_register_device failed with error -23 [ 569.855139][T11926] rdma_rxe: failed to add team_slave_0 [ 569.860982][T11899] can0 (unregistered): slcan off ttyS3. [ 569.895144][ T26] audit: type=1326 audit(1746587061.310:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.0.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 569.960731][T11933] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.991969][ T26] audit: type=1326 audit(1746587061.310:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.0.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247418e969 code=0x7ffc0000 [ 570.018856][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2513'. [ 570.108094][T11933] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.225923][T11933] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.259891][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 570.366841][T11933] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.511911][T11933] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.571541][T11933] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.611725][T11933] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.621466][T11956] loop0: detected capacity change from 0 to 256 [ 570.631687][T11956] exfat: Unknown parameter 'nameŠ}t' [ 570.648902][T11933] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.688763][T11944] lo speed is unknown, defaulting to 1000 [ 571.589072][T11965] loop5: detected capacity change from 0 to 512 [ 571.606531][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'. [ 571.678095][ T26] audit: type=1326 audit(1746587063.250:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11957 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 571.789298][T11965] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 571.818844][ T26] audit: type=1326 audit(1746587063.250:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11957 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 571.866360][T11965] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 572.005907][ T26] audit: type=1326 audit(1746587063.250:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11957 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 572.028918][ T26] audit: type=1326 audit(1746587063.360:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11957 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 572.068127][ T26] audit: type=1326 audit(1746587063.360:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11957 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff898e969 code=0x7ffc0000 [ 572.189711][T11981] can0: slcan on ttyS3. [ 572.226436][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 572.259931][T11983] loop4: detected capacity change from 0 to 512 [ 572.302289][T11983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 572.355016][T11986] loop0: detected capacity change from 0 to 2048 [ 572.369395][T11983] EXT4-fs (loop4): 1 truncate cleaned up [ 572.377830][T11983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 572.440778][T11986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 572.746933][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 573.103502][T12005] loop4: detected capacity change from 0 to 512 [ 573.131112][T12005] EXT4-fs: Ignoring removed orlov option [ 573.162300][T12005] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 3: comm syz.4.2536: lblock 0 mapped to illegal pblock 3 (length 1) [ 573.196141][T12005] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2536: error -117 reading directory block [ 573.209174][T12005] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 573.221095][T12005] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 573.349118][ T4866] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 573.368478][ T4866] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 573.383681][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 573.392897][ T4866] EXT4-fs (loop0): This should not happen!! Data will be lost [ 573.392897][ T4866] [ 573.429126][T11980] can0 (unregistered): slcan off ttyS3. [ 573.440018][ T4866] EXT4-fs (loop0): Total free blocks count 0 [ 573.447215][ T4866] EXT4-fs (loop0): Free/Dirty block details [ 573.453286][ T4866] EXT4-fs (loop0): free_blocks=2415919504 [ 573.467851][ T4866] EXT4-fs (loop0): dirty_blocks=3376 [ 573.502124][ T4866] EXT4-fs (loop0): Block reservation details [ 573.516232][ T4866] EXT4-fs (loop0): i_reserved_data_blocks=211 [ 573.656131][ T4866] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1320 with error 28 [ 573.767237][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 573.880410][T12018] loop2: detected capacity change from 0 to 512 [ 573.902786][T11990] ------------[ cut here ]------------ [ 573.909031][T11990] kernel BUG at fs/buffer.c:2666! [ 573.914278][T12018] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 573.940152][T11990] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 573.946296][T11990] CPU: 1 PID: 11990 Comm: kmmpd-loop0 Not tainted 6.1.137-syzkaller #0 [ 573.954572][T11990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 573.964657][T11990] RIP: 0010:submit_bh_wbc+0x4ac/0x4d0 [ 573.970068][T11990] Code: 01 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c0 fe ff ff 48 89 ef e8 95 67 e2 ff e9 b3 fe ff ff e8 8b f4 90 ff 0f 0b e8 84 f4 90 ff <0f> 0b e8 7d f4 90 ff 0f 0b e8 76 f4 90 ff 0f 0b e8 6f f4 90 ff 0f [ 573.989713][T11990] RSP: 0000:ffffc9000ccf7cc8 EFLAGS: 00010293 [ 573.995792][T11990] RAX: ffffffff81efcf1c RBX: 0000000000000000 RCX: ffff88802c8b9dc0 [ 574.003780][T11990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.011864][T11990] RBP: 0000000000003801 R08: dffffc0000000000 R09: ffffed100e87f597 [ 574.019957][T11990] R10: ffffed100e87f597 R11: 1ffff1100e87f596 R12: 1ffff1100e87f596 [ 574.028123][T11990] R13: 0000000000000000 R14: ffff8880743facb0 R15: ffff8880267ea000 [ 574.036234][T11990] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 574.045710][T11990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.052385][T11990] CR2: 00007f7fee236000 CR3: 0000000075d0c000 CR4: 00000000003506e0 [ 574.060396][T11990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.068836][T11990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.076846][T11990] Call Trace: [ 574.080242][T11990] [ 574.083186][T11990] ? debug_object_free+0x2a2/0x3e0 [ 574.088949][T11990] write_mmp_block_thawed+0x360/0x4f0 [ 574.094354][T11990] ? read_mmp_block+0x6f0/0x6f0 [ 574.099230][T11990] ? rcu_read_lock_any_held+0xb0/0x120 [ 574.104717][T11990] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 574.110138][T11990] ? kmmpd+0x6f7/0x980 [ 574.114260][T11990] write_mmp_block+0x13e/0x3a0 [ 574.119086][T11990] kmmpd+0x6f7/0x980 [ 574.123028][T11990] kthread+0x29d/0x330 [ 574.127120][T11990] ? write_mmp_block_thawed+0x4f0/0x4f0 [ 574.133734][T11990] ? kthread_blkcg+0xd0/0xd0 [ 574.138972][T11990] ret_from_fork+0x1f/0x30 [ 574.143712][T11990] [ 574.146764][T11990] Modules linked in: [ 574.176170][T12022] netlink: 'syz.1.2541': attribute type 11 has an invalid length. [ 574.191871][T12018] EXT4-fs (loop2): 1 truncate cleaned up [ 574.197833][T11990] ---[ end trace 0000000000000000 ]--- [ 574.201326][T12018] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 574.203530][T11990] RIP: 0010:submit_bh_wbc+0x4ac/0x4d0 [ 574.215123][T12022] PM: Image not found (code -6) [ 574.219973][T11990] Code: 01 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c0 fe ff ff 48 89 ef e8 95 67 e2 ff e9 b3 fe ff ff e8 8b f4 90 ff 0f 0b e8 84 f4 90 ff <0f> 0b e8 7d f4 90 ff 0f 0b e8 76 f4 90 ff 0f 0b e8 6f f4 90 ff 0f [ 574.244544][T11990] RSP: 0000:ffffc9000ccf7cc8 EFLAGS: 00010293 [ 574.250828][T11990] RAX: ffffffff81efcf1c RBX: 0000000000000000 RCX: ffff88802c8b9dc0 [ 574.259295][T11990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.267592][T11990] RBP: 0000000000003801 R08: dffffc0000000000 R09: ffffed100e87f597 [ 574.275747][T11990] R10: ffffed100e87f597 R11: 1ffff1100e87f596 R12: 1ffff1100e87f596 [ 574.283760][T11990] R13: 0000000000000000 R14: ffff8880743facb0 R15: ffff8880267ea000 [ 574.292840][T11990] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 574.301998][T11990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.308818][T11990] CR2: 0000000000000000 CR3: 0000000079765000 CR4: 00000000003506f0 [ 574.317388][T11990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.325483][T11990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.333668][T11990] Kernel panic - not syncing: Fatal exception [ 574.340091][T11990] Kernel Offset: disabled [ 574.344444][T11990] Rebooting in 86400 seconds..